ECDSA certificate and IPSec

[seanmcb]

I have a working IPSec VPN. But my CA and cert are expiring soon so I thought I'd use the more modern ECDSA instead of RSA.

An ECDSA CA seems to work. But...

If I generate an RSA certificate from that new CA and then choose that new certificate for the IPSec phase 1, my client can connect successfully.

But if I generate an ECDSA certificate from that same new CA and then choose that new certificate for the IPSec phase 1, my client cannot connect.

Should this work?

Thanks,

Sean